This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json) Hash identifier: Fye6S/91GaqlyosOwmeHPS3DYCnI+a6vULofw0eHi4s= Subject key identifier: E4:CF:61:2C:69:98:56:B5:B6:58:C3:D2:B2:55:CE:42:DA:2A:61:B0 Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7 Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7 Certificate serial: 019B262D9D81678481A1BFEDD4F981D46A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft Manifest number: 0931 Signing time: Tue 16 Dec 2025 08:01:22 +0000 Manifest this update: Tue 16 Dec 2025 08:01:22 +0000 Manifest next update: Wed 17 Dec 2025 08:01:22 +0000 Files and hashes: 1: Evho_cMgUimufNWmo89VlB8ZA3M.roa (hash: 2vAp0+W0OyinQ7bz3KRWYoOM0rGntzBMfgwLVb6cFF4=) 2: GmmTJrDnl5l4oNm96pmFHnUTmtw.roa (hash: pwolnRd5ZwHSnC/gP9Agf6nFawzcw4azMTiVm2n1TBU=) 3: OTa2_ClY6w9bRnknrGzz6ZpLbY0.roa (hash: auzCJAX6dLQz9Niz6mEEUMnopgCP2rrZW6Motu990Ng=) 4: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: bGayiqADPv9lzn/84GdoDRZ2w3maMCtkNMZ0WSG8ChM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:9d:81:67:84:81:a1:bf:ed:d4:f9:81:d4:6a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7 Validity Not Before: Dec 16 08:01:22 2025 GMT Not After : Dec 17 08:01:22 2025 GMT Subject: CN=e4cf612c699856b5b658c3d2b255ce42da2a61b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:98:91:60:5b:82:4d:14:2a:9f:74:fb:b6:2f: ae:b3:7b:bd:cc:99:79:60:ab:2b:00:7d:b3:3b:98: 17:db:4c:74:eb:4b:5b:85:a7:03:c1:a4:3c:56:73: 55:dd:8d:b9:5d:77:03:f3:7a:ee:b2:4b:c9:5d:1c: e2:7b:48:89:d0:54:dc:5d:1a:91:7f:03:31:b1:1a: 3d:b4:f0:26:c9:36:de:0f:71:a6:14:37:ef:6d:59: 65:59:48:fc:b1:02:4f:26:be:49:b6:6b:d1:58:1c: d3:1c:c1:41:1b:90:53:2e:54:d4:db:e6:00:16:65: e4:94:6c:7f:0d:79:7d:58:ec:88:2e:13:b3:27:09: cc:4a:93:fe:2b:ac:fc:03:75:4d:1c:6d:6f:34:93: 8c:de:fa:fc:6a:3a:42:1c:30:dc:db:77:35:f7:d7: de:e9:96:c2:b9:fe:e8:10:fe:52:6f:36:f0:87:e0: f3:5a:6e:9d:1b:2b:85:e9:67:1f:88:cf:d7:b3:ae: 7f:ae:b3:be:01:42:0d:7f:10:0c:81:62:e1:cb:26: c6:23:ff:a3:c0:70:4a:12:d6:7f:38:a4:87:8a:99: ad:40:56:f3:ed:f7:b0:81:38:f7:5d:77:ca:24:94: ec:62:94:b1:e1:0e:5f:0c:e5:fb:e6:64:67:b0:a7: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:61:2C:69:98:56:B5:B6:58:C3:D2:B2:55:CE:42:DA:2A:61:B0 X509v3 Authority Key Identifier: keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:eb:d4:cb:64:c6:52:7e:25:88:39:7a:ea:98:04:9e:e3:f8: 5f:df:2f:28:a0:5d:30:e2:f1:9f:e2:98:44:4d:ba:ae:87:16: 5d:72:85:12:63:d2:f1:56:29:42:6f:50:f7:89:60:81:aa:2d: 09:80:5e:37:e0:5e:3b:30:36:6d:9c:c6:a2:85:ff:84:7c:1d: f3:e8:ba:44:82:17:0e:f0:2f:41:65:3c:02:bf:61:9c:6a:7d: 53:5b:f6:3b:d8:f3:0d:86:ec:eb:e0:ce:f0:78:da:37:b0:11: 47:37:78:c1:58:62:f8:0c:63:6e:0b:20:dd:85:b1:c7:7a:73: 26:49:8c:6d:73:d1:eb:b1:fe:c7:41:b6:0d:42:b1:78:23:a8: 6f:c9:a5:4e:a0:c2:13:ea:31:94:06:bc:47:8b:ba:86:eb:6f: 3f:35:d2:1a:3c:5f:95:37:5c:15:0a:68:d2:2e:64:ec:b1:2e: 49:44:5d:f8:f2:1d:c1:98:7c:f8:08:a4:ac:15:e8:89:d1:84: 09:ca:68:10:50:60:75:57:ac:7a:64:7e:db:be:6e:a6:5e:bc: 7b:35:00:6b:0f:e2:fd:64:b7:a7:28:22:38:c3:25:1f:17:1f: b8:dc:14:da:f7:b5:44:80:37:c6:ec:5c:e8:a4:35:69:a5:61: 6f:8d:8a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLZ2BZ4SBob/t1PmB1GpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTZiYzcyMWM3NDBjMTBmYzdiMGQ4YjFiMzU4YTJkMzVm NDg4YjcwHhcNMjUxMjE2MDgwMTIyWhcNMjUxMjE3MDgwMTIyWjAzMTEwLwYDVQQD EyhlNGNmNjEyYzY5OTg1NmI1YjY1OGMzZDJiMjU1Y2U0MmRhMmE2MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJiRYFuCTRQqn3T7ti+us3u9zJl5 YKsrAH2zO5gX20x060tbhacDwaQ8VnNV3Y25XXcD83ruskvJXRzie0iJ0FTcXRqR fwMxsRo9tPAmyTbeD3GmFDfvbVllWUj8sQJPJr5JtmvRWBzTHMFBG5BTLlTU2+YA FmXklGx/DXl9WOyILhOzJwnMSpP+K6z8A3VNHG1vNJOM3vr8ajpCHDDc23c199fe 6ZbCuf7oEP5Sbzbwh+DzWm6dGyuF6WcfiM/Xs65/rrO+AUINfxAMgWLhyybGI/+j wHBKEtZ/OKSHipmtQFbz7fewgTj3XXfKJJTsYpSx4Q5fDOX75mRnsKdJnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTPYSxpmFa1tljD0rJVzkLaKmGwMB8GA1UdIwQY MBaAFGQWvHIcdAwQ/HsNixs1ii019Ii3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82ZGIyNjQtNzNkNC00M2FjLWE5N2Ut NTkwYjFiMmE0NjA5LzEvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy82ZGIyNjQtNzNkNC00M2FjLWE5N2UtNTkwYjFiMmE0NjA5 LzEvWkJhOGNoeDBEQkQ4ZXcyTEd6V0tMVFgwaUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUevUy2TG Un4liDl66pgEnuP4X98vKKBdMOLxn+KYRE26rocWXXKFEmPS8VYpQm9Q94lggaot CYBeN+BeOzA2bZzGooX/hHwd8+i6RIIXDvAvQWU8Ar9hnGp9U1v2O9jzDYbs6+DO 8HjaN7ARRzd4wVhi+Axjbgsg3YWxx3pzJkmMbXPR67H+x0G2DUKxeCOob8mlTqDC E+oxlAa8R4u6hutvPzXSGjxflTdcFQpo0i5k7LEuSURd+PIdwZh8+AikrBXoidGE CcpoEFBgdVesemR+275upl68ezUAaw/i/WS3pygiOMMlHxcfuNwU2ve1RIA3xuxc 6KQ1aaVhb42KSw== -----END CERTIFICATE-----Generated at Tue Dec 16 10:38:18 2025 by rpki-client